Zlob sites update
Zlob Trojan Distributing site:
Site Name: Formatmpeg.com
IP Address: 77.91.231.183
Site Name: Mpegstandard.com
IP Address: 85.255.120.108
Scam Internet Security Page:
Site Name: Otherhomepage.com
IP Address: 85.255.116.212
404Errorpage Scam:
Site Name: Adnsline.com
IP Address: 85.255.118.242
Security Guide Scam Page:
Site Name: Secureshortcuts.com
IP Address: 85.255.118.37
Which uses the following Scare/Fake scanner pages to promote rogue security application
Windows-virus-scanner.com -> A fake scanner promoting Antivirus 2009 rogue security application
Online-xpcleaner.com ->A fake scanner promoting XP cleaner a bogus/rogue cleaner software
Site Name: Formatmpeg.com
IP Address: 77.91.231.183
Site Name: Mpegstandard.com
IP Address: 85.255.120.108
Scam Internet Security Page:
Site Name: Otherhomepage.com
IP Address: 85.255.116.212
404Errorpage Scam:
Site Name: Adnsline.com
IP Address: 85.255.118.242
Security Guide Scam Page:
Site Name: Secureshortcuts.com
IP Address: 85.255.118.37
Which uses the following Scare/Fake scanner pages to promote rogue security application
Windows-virus-scanner.com -> A fake scanner promoting Antivirus 2009 rogue security application
Online-xpcleaner.com ->A fake scanner promoting XP cleaner a bogus/rogue cleaner software
Ad-Server-Gate Pages:
Site Name: Asgates.com
IP Address: 85.255.118.214
Site Name: Qwgates.com
IP Address: 85.255.118.212
The Ad-Server-Gate pages redirects to fake Security center site Allsecurenews.com which promotes Rogue security applications.
Site Name: Allsecurenews.com
IP Address: 85.255.118.213
Other component sites
Site Name: Browseroption.com
IP Address: 216.255.179.244
http://www.Browseroption(dot)com/redirect.php -> redirects to scan.wspscanner.com, which is a fake/scare scan page used to push WinSpywareProtect rogue security application.
All the above mentioned sites advertise/push well documented Rogue security applications. Stay away from these sites.
Bharath M N
Site Name: Asgates.com
IP Address: 85.255.118.214
Site Name: Qwgates.com
IP Address: 85.255.118.212
The Ad-Server-Gate pages redirects to fake Security center site Allsecurenews.com which promotes Rogue security applications.
Site Name: Allsecurenews.com
IP Address: 85.255.118.213
Other component sites
Site Name: Browseroption.com
IP Address: 216.255.179.244
http://www.Browseroption(dot)com/redirect.php -> redirects to scan.wspscanner.com, which is a fake/scare scan page used to push WinSpywareProtect rogue security application.
All the above mentioned sites advertise/push well documented Rogue security applications. Stay away from these sites.
Bharath M N